Analysis
- max time kernel
899s - max time network
883s - platform
android-11_x64 - resource
android-x64-arm64-20260721-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260721-enlocale:en-usos:android-11-x64system - submitted
13/11/2026, 01:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
scapewatch.apk
Resource
android-x86-arm-20260721-en
5 signatures
900 seconds
Behavioral task
behavioral2
Sample
scapewatch.apk
Resource
android-x64-20260721-en
6 signatures
900 seconds
Behavioral task
behavioral3
Sample
scapewatch.apk
Resource
android-x64-arm64-20260721-en
4 signatures
900 seconds
General
- Target scapewatch.apk
- Size 3.0MB
- Sample261113-bs51caet8x
- SHA256 fdc7a209d3274067b93134c10e1a64ab2e7818fb528e186ab90c0ed5f36fce89
- MD5 24d1deb4aa35f5a54105357976426767
- SHA1 f4222bd8c48bbfc701fe412c02d7c08b76d4149a
- SHA512 6aad073f17d3ed152390baac1b2cbab21b412a0806eba6eaff447956f3688809848493abf321d7cec51778bfe2a84180788084e1e689e1294c9cfe61797a4c95
- SSDEEP 49152:/2pcV3zKEb17Aemw74umOW5EY24cecyW7zbAk+rb+2y9NfncVWxfrugPVmHl:+pcZBbpAefSOW5EUc+ozbDljfrRmHl
- TLSH T1A5E50182F7E12D2ECC7B88360F9B473146269D078957D70B9AA8322C6D376D84F94BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.scapewatch.game - Checks the presence of a debugger
- Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.scapewatch.game - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.scapewatch.game
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.scapewatch.game/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 964f609643fc803cd61c8da843bb3347f6cf8d7d8254da3dde2feaa126c8381c
- MD5 aa1c4dee076515bc9beac194325f8872
- SHA1 db3acf37b8b29dc3d22c20aa13eb146c2604b08e
- SHA512 3d89902f549e8a5302a40516b165ab1b9225a3d83ab45ad4f521ad391502bad7364df6d535b48f2293c268fadcbede6beeec73dc95e24384ca89c66ffc3868b2
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.scapewatch.game/primary.prof
- Size 2KB
- SHA256 53f7fe9dd4bfd827b7a60fe2d200ed29ebf7f355d301a88cd517e868d7d462f2
- MD5 06f88ffbc654d4e6937a16ff013927ad
- SHA1 c351898b43531673c60323b926d95e9c34a16c38
- SHA512 7333939646adff990cc81c57d331ee6a375f1c13893fde5cbbba3be50e6857ad7f3f0446baafecb6758af35fc1a564cc2026a86a0ac57432ed8a61cdce503a3e
- TLSH T1C15119BCC232BC3204BAAA364C6D0B5F93EE4E22E5F82452402D7BEF816C41BC358557
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.scapewatch.game/primary.prof
- Size 5KB
- SHA256 0bad641d922828234b6796d9486a0ede4103f383d346001f2f5edb09ea55d194
- MD5 c2e764fc7098b146b3be836fd90d3b16
- SHA1 cf17b568db3bf7fba6a765033248e9151923e827
- SHA512 2ed4939d32b9b665ef7d5233d217c63f5487dae0e4b3c890f1ef88da2aef793e772b7ca18733095cd3ded3aed8e7842fd488931466c61bff64299775682eea55
- SSDEEP 96:+/8w4jc4HktUPdp7yLten6WlL8Rbkl68wlFr7eniClef5hRd5afl0r6mRvnIj3h:hJc0Pdp7gGlu8wnrinjlc5rd5ldRvnoR
- TLSH T156B17DB24ED444855E4DE95FD21F7796EE488400AFE3261A95C81DB01086DD9E49C7E3
- MD5 SHA1 SHA512 SSDEEP TLSH